$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: 5t3oPQ00lAEaG2y0TEWk9aRWseWZf3yrBbZz+l0E3c8= Subject key identifier: AD:D7:24:C9:BD:C2:49:0D:B8:26:07:4D:86:64:AD:1B:0C:7A:30:49 Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 6D291DE7C519101DCA99EAA19B519415DFCC9226 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: CE Signing time: Mon 03 Nov 2025 13:41:29 +0000 Manifest this update: Mon 03 Nov 2025 13:36:29 +0000 Manifest next update: Thu 06 Nov 2025 14:36:29 +0000 Files and hashes: 1: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: 3u6T1D2yqF7KU/ZNSbOMOVs+1KxbwBDgWmqKH6XUOPc=) 2: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:29:1d:e7:c5:19:10:1d:ca:99:ea:a1:9b:51:94:15:df:cc:92:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Nov 3 13:36:29 2025 GMT Not After : Nov 6 14:36:29 2025 GMT Subject: CN=ADD724C9BDC2490DB826074D8664AD1B0C7A3049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a3:11:d1:07:46:60:4e:a4:12:7e:82:7f:06: 55:2b:dc:14:fe:73:77:d4:0e:bd:80:d7:04:de:01: 2c:0f:3c:5a:9a:5f:b5:a3:a0:ef:85:df:94:9f:3d: 49:a9:d6:c5:e9:15:e3:6d:78:a6:1a:d6:3f:b8:3b: 54:ca:8c:75:8e:20:ad:57:0d:2e:a4:e1:8b:21:ed: 9c:26:50:2c:02:38:3a:14:3b:d8:57:71:5d:42:d5: 4b:65:3a:45:9d:5e:4f:32:a2:e4:c0:1d:d8:c0:95: 20:58:81:b0:02:ab:8b:fc:a9:c8:0e:02:37:3f:b5: 12:99:e8:87:d8:fa:96:1c:80:54:8e:dd:72:9e:26: 5b:d8:bd:3a:7b:ef:09:1a:cb:08:65:58:35:02:ed: 9f:c0:67:f9:1d:6f:7a:07:36:53:63:98:c1:80:c6: e6:1a:50:2b:1c:5e:5c:81:5b:18:1d:9b:23:8f:db: 8b:98:fb:72:b7:1c:0e:ef:09:2b:16:0b:ff:ba:20: d4:b6:bd:07:ba:6e:e2:17:60:4b:73:72:46:7a:13: c5:21:9d:59:63:e1:b8:00:97:5a:7d:c6:39:bf:3f: 96:1b:fe:e4:27:68:06:10:5e:39:74:35:9d:ec:55: 3d:71:2b:00:db:57:9c:53:79:b9:c9:db:33:52:d5: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:24:C9:BD:C2:49:0D:B8:26:07:4D:86:64:AD:1B:0C:7A:30:49 X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ae:1e:b9:bf:ae:56:6d:40:be:f3:34:27:02:be:a2:45:b7: 04:03:e5:3a:ce:20:fa:a6:26:7d:1a:bf:72:5a:7c:b0:44:a2: a6:88:08:17:09:fa:51:8c:7e:a8:2e:54:37:e2:7b:67:63:5d: 26:2e:c9:11:24:bb:9a:13:bb:7a:1d:ec:37:3c:94:d7:0a:59: 35:12:22:c0:3a:ae:32:39:73:ed:f1:85:ab:8d:12:e3:95:cc: 2f:0b:1a:ea:ad:18:d9:ac:3d:c6:05:ce:46:e0:c8:08:9a:61: e8:d1:4f:8f:dc:75:a1:26:68:85:d1:a8:57:2b:c7:6f:2e:94: b6:ab:5b:3f:da:25:62:34:e5:b3:dd:b5:db:d0:42:db:06:f6: 16:97:a9:48:9a:19:f1:71:b4:1b:cc:af:56:84:ba:c6:83:fa: 1c:af:6a:8c:25:ec:f5:73:d9:21:f5:a6:ed:80:61:6f:26:64: 2c:1a:32:0b:69:b1:ce:30:6a:df:23:3e:e1:e4:56:b0:c3:95: 2f:c3:06:92:1e:15:bf:3b:25:6f:dd:e3:fe:aa:ef:99:ed:0c: ff:e4:55:0d:9b:fa:3a:2b:cf:20:10:1a:03:52:00:36:9f:72: 0d:41:92:dc:f6:f1:d2:64:79:fc:a5:bb:a1:c1:b2:ff:2e:79: 23:49:18:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSkd58UZEB3Kmeqhm1GUFd/MkiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNTExMDMxMzM2MjlaFw0yNTExMDYxNDM2MjlaMDMxMTAvBgNV BAMTKEFERDcyNEM5QkRDMjQ5MERCODI2MDc0RDg2NjRBRDFCMEM3QTMwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhoxHRB0ZgTqQSfoJ/BlUr3BT+ c3fUDr2A1wTeASwPPFqaX7WjoO+F35SfPUmp1sXpFeNteKYa1j+4O1TKjHWOIK1X DS6k4Ysh7ZwmUCwCODoUO9hXcV1C1UtlOkWdXk8youTAHdjAlSBYgbACq4v8qcgO Ajc/tRKZ6IfY+pYcgFSO3XKeJlvYvTp77wkaywhlWDUC7Z/AZ/kdb3oHNlNjmMGA xuYaUCscXlyBWxgdmyOP24uY+3K3HA7vCSsWC/+6INS2vQe6buIXYEtzckZ6E8Uh nVlj4bgAl1p9xjm/P5Yb/uQnaAYQXjl0NZ3sVT1xKwDbV5xTebnJ2zNS1WFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrdckyb3CSQ24JgdNhmStGwx6MEkwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOuHrm/rlZtQL7zNCcCvqJFtwQD5TrOIPqm Jn0av3JafLBEoqaICBcJ+lGMfqguVDfie2djXSYuyREku5oTu3od7Dc8lNcKWTUS IsA6rjI5c+3xhauNEuOVzC8LGuqtGNmsPcYFzkbgyAiaYejRT4/cdaEmaIXRqFcr x28ulLarWz/aJWI05bPdtdvQQtsG9haXqUiaGfFxtBvMr1aEusaD+hyvaowl7PVz 2SH1pu2AYW8mZCwaMgtpsc4wat8jPuHkVrDDlS/DBpIeFb87JW/d4/6q75ntDP/k VQ2b+jorzyAQGgNSADafcg1Bktz28dJkefylu6HBsv8ueSNJGOY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:07:03 2025 by rpki-client